Pull request #5083: appid: enable out-of-order inspection by default

Merge in SNORT/snort3 from ~YEFURMAN/snort3:appid_ooo_by_default to master

Squashed commit of the following:

commit bf9e2b73759c5c43191f78445c1e301bd2a0241e
Author: yefurman <yefurman@cisco.com>
Date:   Thu Jan 8 07:43:19 2026 -0500

    appid: enable out-of-order inspection by default

diff --git a/src/network_inspectors/appid/app_info_table.cc b/src/network_inspectors/appid/app_info_table.cc
index 4030b94a3b02381829ea8e853b077a0522b957b7..29c4a8aca13a081e6908ec502b11dfdb1925491d 100644 (file)
--- a/src/network_inspectors/appid/app_info_table.cc
+++ b/src/network_inspectors/appid/app_info_table.cc
@@ -632,9 +632,9 @@ void AppInfoManager::load_odp_config(OdpContext& odp_ctxt, const char* path)
             }
             else if (!(strcasecmp(conf_key, "inspect_ooo_flows")))
             {
-                if (!(strcasecmp(conf_val, "enabled")))
+                if (!(strcasecmp(conf_val, "disabled")))
                 {
-                    odp_ctxt.inspect_ooo_flows = true;
+                    odp_ctxt.inspect_ooo_flows = false;
                     continue;
                 }
             }

diff --git a/src/network_inspectors/appid/appid_config.h b/src/network_inspectors/appid/appid_config.h
index f655e7b0f4ecde6f5084c56bc8c5627858f81774..bb3992100a9546cacd57faba764932c7290bfec0 100644 (file)
--- a/src/network_inspectors/appid/appid_config.h
+++ b/src/network_inspectors/appid/appid_config.h
@@ -149,7 +149,7 @@ public:
     bool recheck_for_portservice_appid = false;
     bool eve_http_client = true;
     bool appid_cpu_profiler = true;
-    bool inspect_ooo_flows = false;
+    bool inspect_ooo_flows = true;
     uint8_t brute_force_inprocess_threshold = DEFAULT_BRUTE_FORCE_INPROCESS_STATE_THRESHOLD;
     uint16_t max_packet_before_service_fail = DEFAULT_MAX_PKTS_BEFORE_SERVICE_FAIL;
     uint16_t max_packet_service_fail_ignore_bytes = DEFAULT_MAX_PKT_BEFORE_SERVICE_FAIL_IGNORE_BYTES;